Uber sued after data stolen by hackers covered up

2018-03-05T16:10:39Z2018-03-09T00:17:05Z

By MARC LEVYAssociated Press

HARRISBURG, Pa. (AP) - The ride-hailing company Uber broke Pennsylvania law when it failed to notify potential victims, including thousands of drivers, for a year after it discovered hackers had stolen their personal information, said the state attorney general, who sued the company Monday.

The lawsuit, filed in Philadelphia, said hackers stole the names and driver's license numbers of at least 13,500 Pennsylvania Uber drivers. It accused Uber of violating a state law requiring it to notify victims of a data breach within a "reasonable" time frame.

"Instead of notifying impacted consumers of the breach within a reasonable amount of time, Uber hid the incident for over a year - and actually paid the hackers to delete the data and stay quiet," state Attorney General Josh Shapiro said in a statement. "That's just outrageous corporate misconduct, and I'm suing to hold them accountable and recover for Pennsylvanians."

Shapiro's office did not have details about riders who were affected, but asked Pennsylvanians who believes they may have been harmed by the Uber hack to file a complaint with the office.

Uber revealed in November that hackers in 2016 had stolen the names, email addresses and mobile phone numbers of 57 million riders around the world. The thieves also nabbed the driver's license numbers of 600,000 Uber drivers in the U.S. The breach did not include any credit card information or Social Security information, Uber said.

When it revealed the hack, Uber said there was no evidence the stolen data had been misused. It acknowledged paying the hackers $100,000 to destroy the stolen information.

Washington state and Chicago have sued Uber, and attorneys general in other states have said they were investigating Uber's data breach.

Uber said it is cooperating with Pennsylvania investigators.

"I've been up front about the fact that Uber expects to be held accountable; our only ask is that Uber be treated fairly and that any penalty reasonably fit the facts," Uber said in statement from its chief legal officer, Tony West.

The lawsuit seeks civil penalties into the millions of dollars, including $1,000 for each violation of consumer protection laws and $3,000 for each violation involving a victim who is 60 or older.

It is the first time Pennsylvania has sued under a 12-year-old state law that makes failing to notify potential victims of a breach of personal information punishable under consumer protection laws.

Copyright 2018 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

Authorities said Friday that the cables suspending a pedestrian bridge were being tightened after a "stress test" when the 950-ton concrete span collapsed over traffic, killing at least six people and injuring 10

Authorities said Friday that the cables suspending a pedestrian bridge were being tightened after a "stress test" when the 950-ton concrete span collapsed over traffic, killing at least six people and injuring 10

Nikolas Cruz appears in court for a hearing in Fort Lauderdale, FL, on Monday, Feb. 19. Authorities said Cruz’s brother was arrested for trespassing at the same school on Monday, March 19. (Source: Mike Stocker/South Florida Sun-Sentinel via AP, Pool)

Nikolas Cruz appears in court for a hearing in Fort Lauderdale, FL, on Monday, Feb. 19. Authorities said Cruz’s brother was arrested for trespassing at the same school on Monday, March 19. (Source: Mike Stocker/South Florida Sun-Sentinel via AP, Pool)

Authorities say the brother of the teen charged with killing 17 people at a Florida school has been arrested for trespassing at the same school.

Authorities say the brother of the teen charged with killing 17 people at a Florida school has been arrested for trespassing at the same school.

(AP Photo/Brian Skoloff, File). FILE - This April 2, 2017 file photo made with a drone, shows the U.S. Mexico border fence as it cuts through the two downtowns of Nogales, Ariz. A U.S. border patrol agent is going on trial for second-degree murder in U...

A Border Patrol agent is going on trial for second-degree murder this week in a rare Justice Department prosecution of a fatal cross-border Mexico shooting.

A Border Patrol agent is going on trial for second-degree murder this week in a rare Justice Department prosecution of a fatal cross-border Mexico shooting.

New York City's deadly helicopter crash has prompted the National Transportation Safety Board to call on federal regulators to prohibit commercial flights that use passenger harness systems that do not allow for...

New York City's deadly helicopter crash has prompted the National Transportation Safety Board to call on federal regulators to prohibit commercial flights that use passenger harness systems that do not allow for easy release.

(Nick Wagner/Austin American-Statesman via AP). FBI agents meet at the scene of an explosion in Austin, Texas, Sunday, March 18, 2018. At least a few people were injured in another explosion in Texas' capital late Sunday, after three package bombs deto...

Police have warned residents near the site of the latest explosion in Austin to remain indoors and to call 911 if they need to leave home before 10 a.m.

Police have warned residents near the site of the latest explosion in Austin to remain indoors and to call 911 if they need to leave home before 10 a.m.